To enable Secure Boot on Windows 10, follow these steps:
- Check if Secure Boot is already enabled:
- Search for "System Information" in the Start menu and open it.
- Scroll to "Secure Boot State" to see if it's On or Off.
- Restart into UEFI/BIOS settings:
- Open Settings > Windows Update > Advanced options.
- Under Recovery, click "Restart now" in the Advanced startup section.
- After restart, choose Troubleshoot > Advanced options > UEFI Firmware Settings and restart again.
- In the BIOS/UEFI menu:
- Navigate to the Boot tab and disable the Compatibility Support Module (CSM) by setting "Launch CSM" to Disabled.
- Find the Secure Boot option and set "OS type" to "Windows UEFI mode."
- If needed, install default Secure Boot keys under Key Management.
- Save changes and exit BIOS (usually by pressing F10).
- After reboot, confirm Secure Boot is On in the System Information.
Note: Your drive must use the GPT partition style and BIOS should be in UEFI mode to enable Secure Boot. You may need to convert MBR to GPT if necessary. This process may slightly vary depending on your PC or motherboard manufacturer, so check their specific instructions when needed.